$ rpki-client -vvf repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft File: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft (raw, json) Hash identifier: 7pYsToHjDl4Pq6DhVujwf+JGvLb1UCqNYdNXrr8JLn8= Subject key identifier: C4:88:C5:37:D6:11:B4:D8:16:12:C3:5E:99:29:A6:28:83:C0:33:A1 Authority key identifier: C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 Certificate issuer: /CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Certificate serial: 1C46B5796FD044DEFE97800A8ED1820E7D915BB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft Manifest number: 92 Signing time: Mon 04 Aug 2025 15:31:05 +0000 Manifest this update: Mon 04 Aug 2025 15:26:05 +0000 Manifest next update: Thu 07 Aug 2025 22:22:05 +0000 Files and hashes: 1: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl (hash: hibAzW14u4sMsUvc+0SP6t9gol3Hdj0hJNaWCtcKskI=) 2: 3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa (hash: M1UfgBl+o+VtOJt76FjRKdEJWLXVwypZfHtYeDLVMfk=) 3: 3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (hash: 0CvOPtspHIv++OpYpPeOAtYrJalD1E7T3Av1Tkd5zHo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 22:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:46:b5:79:6f:d0:44:de:fe:97:80:0a:8e:d1:82:0e:7d:91:5b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Validity Not Before: Aug 4 15:26:05 2025 GMT Not After : Aug 7 22:22:05 2025 GMT Subject: CN=C488C537D611B4D81612C35E9929A62883C033A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ca:fe:93:55:7d:7b:f2:4e:54:01:35:f5:83: 54:3f:2a:16:be:9b:f1:39:ea:2b:cf:87:0f:a9:fa: 3e:d3:29:70:fe:d3:67:bb:2f:a4:a6:f7:8a:75:27: 12:77:2f:f7:5c:d7:87:01:a5:3f:8b:88:f0:d8:a2: 4b:ce:63:d5:b3:d9:a0:a5:db:fa:d4:93:79:07:dc: e0:65:bc:1e:5a:50:40:a2:8c:b9:40:fc:27:bd:4f: cb:81:f0:01:71:84:bd:04:84:88:e9:23:92:ef:54: f2:96:2d:9f:61:08:ca:c8:0c:13:23:5a:04:64:70: 76:58:8f:2f:06:c5:08:16:7a:07:6f:6c:6c:8d:9d: fa:b9:74:b5:40:66:3f:d2:93:da:7b:81:50:dc:a5: 43:7c:1f:ae:e7:be:a1:82:ed:16:cf:e6:18:11:8a: b9:e2:ec:22:74:d4:50:34:76:48:96:70:b0:87:0f: d0:5f:b4:ba:0a:ae:9c:1b:de:54:cd:d2:50:dc:c7: 57:46:08:1d:ff:1d:db:e1:7a:57:d0:13:12:e2:fc: 60:06:6e:bc:e9:64:5b:86:39:ef:10:47:e1:00:7f: ca:2c:c7:38:c6:ba:58:19:ba:3d:79:d9:94:47:6c: 92:9f:dd:e6:95:7c:18:d2:08:40:cc:da:e7:b9:57: ac:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:88:C5:37:D6:11:B4:D8:16:12:C3:5E:99:29:A6:28:83:C0:33:A1 X509v3 Authority Key Identifier: keyid:C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f8:29:46:b6:25:21:81:d9:f7:2b:ca:8d:46:5c:8f:ed:53: 14:9d:9a:b4:88:47:95:48:27:9f:bb:c3:94:16:b5:c8:59:65: fe:f0:32:c9:a4:c6:7a:49:13:5c:e5:75:25:5e:33:b7:c1:48: c6:41:78:a9:7f:7f:66:5c:37:ca:90:27:f8:ff:13:90:d4:bf: 89:a4:53:db:f1:54:15:22:4c:16:b4:e8:b7:1c:87:53:c2:50: d3:63:01:46:68:f8:97:9c:63:8a:a2:b9:62:e3:29:7f:f7:14: 38:2c:90:85:fd:69:e5:d5:05:e6:8a:38:f3:c2:b6:43:ef:0a: 29:6b:06:9e:e9:61:27:62:b0:9c:4f:ba:2d:17:73:1f:08:20: 6d:a8:a3:73:36:02:94:86:18:10:74:5f:c1:aa:e3:8c:26:8a: 49:02:93:89:15:27:0d:4d:ac:41:05:91:e5:41:2a:6e:ed:dc: 8b:1c:b9:5f:28:23:e3:c3:8d:fc:e7:42:6c:bc:43:f8:13:f6: de:d4:52:bc:a1:ac:ad:38:bc:49:1c:4c:1c:f5:b4:e9:0a:04: 89:76:df:3d:7e:e5:b6:db:99:34:c9:e2:f9:4b:9c:b0:d2:f0: 2c:b0:8e:24:8f:ec:7a:ca:29:9a:56:b7:c2:53:58:0a:9b:8e: 04:ee:ac:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHEa1eW/QRN7+l4AKjtGCDn2RW7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDky N0MxNEU1NTAeFw0yNTA4MDQxNTI2MDVaFw0yNTA4MDcyMjIyMDVaMDMxMTAvBgNV BAMTKEM0ODhDNTM3RDYxMUI0RDgxNjEyQzM1RTk5MjlBNjI4ODNDMDMzQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMyv6TVX178k5UATX1g1Q/Kha+ m/E56ivPhw+p+j7TKXD+02e7L6Sm94p1JxJ3L/dc14cBpT+LiPDYokvOY9Wz2aCl 2/rUk3kH3OBlvB5aUECijLlA/Ce9T8uB8AFxhL0EhIjpI5LvVPKWLZ9hCMrIDBMj WgRkcHZYjy8GxQgWegdvbGyNnfq5dLVAZj/Sk9p7gVDcpUN8H67nvqGC7RbP5hgR irni7CJ01FA0dkiWcLCHD9BftLoKrpwb3lTN0lDcx1dGCB3/HdvhelfQExLi/GAG brzpZFuGOe8QR+EAf8osxzjGulgZuj152ZRHbJKf3eaVfBjSCEDM2ue5V6yNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxIjFN9YRtNgWEsNemSmmKIPAM6EwHwYDVR0j BBgwFoAUwtWT0cin9w1FEl1L2+V3SSfBTlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZGIwMTMwZC1jYWEzLTQ3NmYtYWY4MS1iYTcyMjMzMGJlMmMvMC9DMkQ1OTNEMUM4 QTdGNzBENDUxMjVENEJEQkU1Nzc0OTI3QzE0RTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDkyN0Mx NEU1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmRiMDEzMGQtY2FhMy00NzZmLWFm ODEtYmE3MjIzMzBiZTJjLzAvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3 NDkyN0MxNEU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGj4KUa2JSGB2fcryo1GXI/tUxSdmrSIR5VI J5+7w5QWtchZZf7wMsmkxnpJE1zldSVeM7fBSMZBeKl/f2ZcN8qQJ/j/E5DUv4mk U9vxVBUiTBa06Lcch1PCUNNjAUZo+JecY4qiuWLjKX/3FDgskIX9aeXVBeaKOPPC tkPvCilrBp7pYSdisJxPui0Xcx8IIG2oo3M2ApSGGBB0X8Gq44wmikkCk4kVJw1N rEEFkeVBKm7t3IscuV8oI+PDjfznQmy8Q/gT9t7UUryhrK04vEkcTBz1tOkKBIl2 3z1+5bbbmTTJ4vlLnLDS8CywjiSP7HrKKZpWt8JTWAqbjgTurNk= -----END CERTIFICATE-----Generated at Wed Aug 6 12:25:24 2025 by rpki-client